Privacy Policy

Last updated: 14.09.2026

This Privacy Policy explains how we collect, use, and protect your personal data when you use our website or book one of our tours, tickets, or transfers. By using our services, you agree to the terms of this Privacy Policy.

1. Data Controller

The data controller responsible for your personal data is:

2. What Personal Data We Collect

We may collect the following information:

• First and last name
• Email address
• Phone number
• Booking details (dates, tour type, number of participants)
• Payment information (processed securely by our payment provider, Stripe — see Section 7)
• IP address and browser data
• Any other information you choose to provide when booking or contacting us

We may also collect usage data automatically (e.g. your IP address, browser type, visited pages, time and date of visits).

3. Why We Process Your Data

We process your personal data for the following purposes:

• To process and manage your bookings
• To contact you about your reservation (confirmations, updates, reminders, incomplete bookings)
• To provide customer support and respond to your inquiries
• To process payments securely through our payment provider
• To analyze and improve our website and services (e.g. via analytics tools)
• To show relevant advertising and measure its performance (e.g. via Google Ads)
• To comply with legal obligations, such as accounting and tax regulations

The legal basis for processing your data may include:

• Performance of a contract – when processing is necessary to fulfill your booking or provide requested services
• Your consent – for optional tracking and advertising tools (e.g. Google Ads remarketing)
• Our legitimate interests – such as improving our services and ensuring the security and functionality of the website
• Legal obligations – for compliance with applicable laws and regulations

4. Cookies and Tracking Technologies

What Are Cookies? Cookies are small text files placed on your device to make our site work efficiently, remember preferences, and support analytics and advertising. We and our trusted partners use cookies, including:

Types of Cookies:

1. Session cookies – Temporary, deleted when browser closes; essential for site navigation and secure transactions.
2. Persistent cookies – Saved on your device for set periods (e.g., language preferences).
3. Third-party cookies – Set by external services (e.g. analytics, advertising).

Cookies do not automatically contain personal information, but we may link them to data we hold. You can delete or disable them via your browser, which may limit some site functionality.

Our website uses cookies to:

• Ensure proper website functionality
• Remember your preferences (e.g. language)
• Analyze website traffic (e.g. via Google Analytics)
• Deliver and measure relevant advertising (e.g. via Google Ads)

Analytics Cookies – Google Analytics (GA4) We use Google Analytics 4 to understand site usage (visits, pages, timing). The service logs your IP address, but we do not combine it with personal data. See Google's privacy policy for more detail: policies.google.com/privacy

Advertising Cookies – Google Ads We use Google Ads to measure the performance of our advertising campaigns and, where you have given consent, to show you relevant ads based on your visit to our site (remarketing). You may opt out via our Cookie Settings banner or through Google's own tools:

• Google Ads Settings: adssettings.google.com
• NAI: optout.networkadvertising.org
• DAA: optout.aboutads.info

5. Cookie Control and Consent

At your first visit, a cookie banner will:

• Inform you about cookies and tracking
• Let you accept or reject non-essential cookies (analytics and advertising)
• Link to this Privacy Policy

You can manage or disable cookies at any time in your browser settings. Please note that disabling cookies may affect how the website works.

6. Sharing Your Data

We may share your data with:

• Our booking and website platform provider (Bokun), which processes reservation data on our behalf
• Our payment provider, Stripe, which processes payment data securely on our behalf
• Analytics and advertising providers (Google Analytics, Google Ads)
• Government authorities, if required by law
• Other companies, if we undergo a merger or business transfer (you will be informed in such cases)

We do not sell your personal data to third parties.

7. International Transfers

As we operate from Poland, your data is primarily processed within the European Economic Area (EEA). Some of our service providers — including Stripe (payments) and Google (analytics and advertising) — may process data outside the EEA, including in the United States. In such cases, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or an equivalent adequacy mechanism.

8. Data Retention

Your data is stored:

• As long as necessary for service delivery and legal obligations
• Based on the data type; e.g., accounting data is retained for 5 years as required by Polish law
• Until you request deletion, with incomplete or inaccurate data corrected or removed at our discretion

9. Your Rights under GDPR

You have the right to:

• Access your personal data
• Correct or update your data
• Request deletion of your data (right to be forgotten)
• Restrict or object to data processing
• Withdraw consent at any time (without affecting prior processing)
• Data portability
• Lodge a complaint with the supervisory authority (UODO — Urząd Ochrony Danych Osobowych — in Poland)

10. Minors

Our website is not intended for children under 16. We do not knowingly collect data from minors without guardian consent. If you believe we hold data of a minor, please contact us to remove it.

11. Third-Party Links

Our website may include links to other websites. We are not responsible for their content or privacy practices. Please read their privacy policies if you visit them.

12. Data Security

We use appropriate technical and organizational measures to protect your data. However, no system is 100% secure, so we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We recommend reviewing this page regularly.

14. Contact

If you have any questions about this Privacy Policy or how we process your data, please contact us at: office.krakowgo@gmail.com